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SYSTEM AND METHOD FOR SUPPORTING GAN SERVICE REQUEST 
CAPABILITY IN A WIRELESS USER EQUIPMENT CUE) DEVICE 

FIELD OF THE DISCLOSURE 
5 The present patent disclosure generally relates to communication networks. More 

particularly, and not by way of any limitation, the present patent application is directed to 
a system and method for supporting wireless access network (AN) service request 
capability in a user equipment (UE) device operable in a wireless AN space that may be 
interconnected to a wide area cellular network (WACN) space. 

10 

BACKGROUND 

Wireless access networks have become a key element of a variety of 
telecommunications network environments. As to enterprise networks, they provide 
convenient access to network resources for workers carrying portable computers and 

15 mobile handheld devices, and for guests or temporary workers similarly equipped. They 
also provide a cost-effective alternative to relocating physical Ethernet jacks in 
environments where facilities are moved or changed frequently. In addition, wireless 
access points operable with diverse communication/computing devices are becoming 
ubiquitous in public environments such as, e.g., hotels, airports, restaurants, and coffee 

20 shops. With the increase in high-speed Internet access, the use of access point(s) in the 
users' homes is also envisioned and has started for other applications. 

Concomitantly, several developments in the user equipment (UE) arena are also 
taking place to take advantage of the capabilities offered by wireless access networks. Of 
particular interest is the integration of cellular phones with the capability to interface with 

25 a wireless access network such as a wireless Local Area Network (WLAN). With such 
"dual mode" devices becoming available, it should be appreciated that some interworking 
mechanism between the cellular network and WLAN would be required so as to facilitate 
efficient handover of services from one type of network to the other. 

Current GAN specifications provide that a UE device (e.g., a mobile station or 

30 MS) may register on a wide area cellular network (WACN) such as a Public Land Mobile 
Network (PLMN) if it is discovered and allowed according to applicable 3 rd Generation 
Partnership Project (3 GPP) standards. Also, the UE device may be allowed to register on 
a GAN under certain circumstances where there is no WACN connectivity. Additionally, 
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similar network connectivity behavior may be encountered where Unlicensed Mobile 
Access (UMA) technologies are deployed as well. However, several important issues 
arise in such a scenario e.g., number plan compatibility, service handover, emergency call 
routing, just to name a few, especially when connectivity to a PLMN is desired via a GAN 
5 or UMA-based access network. 

BRIEF DESCRIPTION OF THE DRAWINGS 

A more complete understanding of the embodiments of the present patent 
application may be had by reference to the following Detailed Description when taken in 
10 conjunction with the accompanying drawings wherein: 

FIG. 1 depicts a generalized network environment wherein an embodiment of the 
present patent disclosure may be practiced; 

FIG. 2 depicts an exemplary embodiment of a network environment where a user 
equipment (UE) device is operably disposed in accordance with the teachings of the 
15 present patent disclosure; 

FIG. 3 depicts a functional block diagram of a network system where a wide area 
cellular network (WACN) such as a Public Land Mobile Network (PLMN) is accessible 
through a generic access network (GAN) and associated controller (GANC); 

FIG. 4A depicts an exemplary embodiment of a circuit-switched (CS) protocol 
20 stack operable with the network system shown in FIG. 3; 

FIG. 4B depicts an exemplary embodiment of a packet-switched (PS) protocol 
stack operable with the network system shown in FIG. 3; 

FIG. 5A depicts a network arrangement where an access network (GAN or 
Wireless LAN) is operable to connect to a plurality of PLMNs according to one 
25 embodiment wherein each PLMN is served by a corresponding GANC; 

FIG. 5B depicts a network arrangement where an access network (GAN or 
Wireless LAN) is operable to connect to a plurality of PLMNs according to one 
embodiment wherein a plurality of virtual GANC partitions on a single GANC are 
operable to serve the corresponding PLMNs; 
30 FIG. 6 is a flowchart of a generalized network discovery and selection scheme 

according to one embodiment; 

FIG. 7A is a flowchart of a method of gathering network information according to 
one embodiment for purposes of the present disclosure; 
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FIG. 7B is a flowchart of a GANC discovery and registration method according to 
one embodiment wherein one or more GAN services may be requested by a wireless UE 
device; 

FIGS. 8A and 8B are flowcharts associated with a generalized GANC selection 
5 and redirection scheme according to one embodiment; 

FIG. 9 depicts a functional block diagram of an exemplary GANC/UNC node 
according to one embodiment; and 

FIG. 10 depicts a block diagram of an embodiment of a UE device operable 
according to the teachings of the present patent disclosure. 

10 

DETAILED DESCRIPTION OF THE DRAWINGS 

The present patent disclosure is broadly directed to a scheme for supporting 
wireless access network service request capability in a user equipment (UE) device that is 
operable in WACN bands as well as in wireless access network bands (e.g., GAN bands 

15 and/or UMA bands). The UE device includes capability for gaining Internet Protocol (IP) 
connectivity with a wireless access network node (e.g., a GAN controller (GANC) or 
UMA network controller (UNC)). Thereafter, the UE device is operable to initiate a 
registration request message towards the wireless access network node, wherein the 
registration request message includes at least one information element pertaining to 

20 wireless access network services required by the UE device. 

In one aspect, an embodiment of a network messaging method is disclosed which 
comprises: gaining IP connectivity by a UE device with respect to a wireless access 
network node disposed in a network environment that is comprised of a wireless access 
network (AN) space operable to be coupled to a WACN space; and initiating a registration 

25 request message by the UE device towards the wireless access network node, wherein the 
registration request message includes at least one information element pertaining to AN 
services required by the UE device. 

In a further aspect, an embodiment of a UE device is disclosed which comprises: 
means for gaining IP connectivity with respect to a wireless access network node disposed 

30 in a network environment that is comprised of a wireless AN space operable to be coupled 
to a WACN space; and means for initiating a registration request message towards the 
wireless access network node, wherein the registration request message includes at least 
one information element pertaining to AN services required by the UE device. 

3 
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In yet another aspect, an embodiment of a network system is disclosed which 
comprises: a wireless access network node disposed in a network environment that is 
comprised of a wireless access network (AN) space operable to be coupled to a WACN 
space, the wireless access network node for facilitating wireless access services with 
5 respect to a Public Land Mobile Network (PLMN) of the WACN space; a UE device 
including means for gaining IP connectivity with the wireless access network node; and 
means associated with the UE device for initiating a registration request message towards 
the wireless access network node, wherein the registration request message includes at 
least one information element pertaining to wireless access services required by the UE 
10 device. 

A system and method of the present patent disclosure will now be described with 
reference to various examples of how the embodiments can best be made and used. Like 
reference numerals are used throughout the description and several views of the drawings 
to indicate like or corresponding parts, wherein the various elements are not necessarily 

15 drawn to scale. Referring now to the drawings, and more particularly to FIG. 1, depicted 
therein is an exemplary generalized network environment 100 wherein an embodiment of 
the present patent disclosure may be practiced. A user equipment (UE) device 102 may 
comprise any portable computer (e.g., laptops, palmtops, or handheld computing devices) 
or a mobile communications device (e.g., cellular phones or data-enabled handheld 

20 devices capable of receiving and sending messages, web browsing, et cetera), or any 
enhanced personal digital assistant (PDA) device or integrated information appliance 
capable of email, video mail, Internet access, corporate data access, messaging, 
calendaring and scheduling, information management, and the like, that is preferably 
operable in one or more modes of operation. For example, UE device 102 may operate in 

25 the cellular telephony band frequencies as well as wireless Local Area Network (WLAN) 
bands, or possibly in the WLAN bands alone. Further, other bands in which the UE 
device could operate wirelessly may comprise Wi-Max bands or one or more satellite 
bands. Additionally, the network environment 100 is comprised of three broad categories 
of communication spaces capable of providing service to UE device 102. In wide area 

30 cellular network (WACN) space 104, there may exist any number of Public Land Mobile 
Networks (PLMNs) that are operable to provide cellular telephony services which may or 
may not include packet-switched data services. Depending on the coverage area(s) and 
whether the user is roaming, WACN space 104 can include a number of cellular RANs, 
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associated home networks (i.e., home PLMNs or HPLMNs) 1 10 and visited networks (i.e., 
VPLMNs) 112, each with appropriate infrastructure such as Home Location Register 
(HLR) nodes 115, Mobile Switching Center (MSC) nodes 116, and the like. Since the 
WACN space 104 may also include a General Packet Radio Service (GPRS) network that 

5 provides a packet radio access for mobile devices using the cellular infrastructure of a 
Global System for Mobile Communications (GSM)-based carrier network, a Serving 
GPRS Support Node (SGSN) 114 is exemplified therein. Additionally, by way of 
generalization, the PLMNs of the WACN space 104 may comprise networks selected from 
the group comprising one or more Enhanced Data Rates for GSM Evolution (EDGE) 

10 networks, Integrated Digital Enhanced Networks (IDENs), Code Division Multiple Access 
(CDMA) networks, Universal Mobile Telecommunications System (UMTS) networks, 
Universal Terrestrial Radio Access Networks (UTRANs), or any 3 rd Generation 
Partnership Project (3GPP)-compliant network (e.g., 3 GPP or 3GPP2), all operating with 
well known frequency bandwidths and protocols. 

15 Further, UE device 102 is operable to obtain service from an access network (AN) 

space 106 that is operably associated with the WACN space 104. In one implementation, 
the AN space 106 includes one or more generic access networks (GANs) 1 18 as well as 
any type of WLAN arrangements 120. GAN 118, described in additional detail below, is 
operable to provide access services between UE device 102 and a PLMN core network 

20 using a broadband Internet Protocol (IP)-based network. WLAN arrangements 120 
provide short-range wireless connectivity to UE device 102 via access points (APs) or "hot 
spots," and can be implemented using a variety of standards, e.g., IEEE 802.11b, IEEE 
802.11a, IEEE 802.1 lg, HiperLan and HiperLan II standards, Wi-Max standard, OpenAir 
standard, and the Bluetooth standard. Accordingly, it is envisaged that the AN space 106 

25 may also be inclusive of UMA-based access networks that deploy UMA network 
controller (UNC) nodes for effectuating seamless transitions between cellular RAN (part 
of the WACN space 104) and unlicensed wireless networks. 

In one embodiment, interfacing between the WACN and AN spaces may be 
effectuated in accordance with certain standards. For instance, GAN 118 may be 

30 interfaced with a PLMN core using the procedures set forth in the 3GPP TR 43.901 and 
3 GPP TS 43 .xxx documents as well as related documentation. Likewise, WLAN 120 may 
interfaced with a PLMN core using the procedures set forth in the 3 GPP TS 22.234, 3 GPP 
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TS 23.234 and 3GPP TS 24.234 documents as well as related documentation, and may 
therefore be referred to as an Interworking WLAN (I-WLAN) arrangement. 

Additionally, there may exist an access network (AN) space 108 not interfaced to 
the WACN space 104 that offers short-range wireless connectivity to UE device 102. For 
5 instance, AN space 108 may comprise WLANs 122 offering non-3 GPP services, such as 
communications over "public" access points (hotels, coffee shops, bookstores, apartment 
buildings, educational institutions, etc., whether free or for fee), enterprise access points, 
and visited (other enterprise) access points where the user may not be a member of that 
enterprise but is allowed at least some services. 

10 Given the mosaic of the wireless network environment 100 in which UE device 

102 may be disposed, it is desirable that a vertical handover mechanism exists such that 
the user can engage in a call as it moves from a PLMN's radio access network (RAN) to a 
GAN (i.e., handover in) or from GAN to the PLMN's RAN (i.e., handover out). It should 
be recognized that for purposes of the present patent disclosure, the terms "GAN" or 

15 "WLAN" may be interchangeable, and may also include any UMA-based access networks 
as well. At any rate, in order to facilitate such functionality as well as to customize and 
enhance the overall user experience associated therewith, the present patent disclosure 
provides a scheme wherein network information gathered by the UE device as well as 
information relating to its service options, plans, features, and the like (more generally, 

20 "service requirements") is transmitted to a network node disposed in the wireless 
environment 100 so that suitable network-based logic is operable to respond with 
appropriate network selections, lists, etc. that the UE device may use. Further, as will be 
seen in detail below, such network-based logic may invoke procedures that involve one or 
more correlation and filtering schemes, database queries, such that redirection to more 

25 optimal networks may be effectuated in the generalized network environment 100. 

To formalize the teachings of the present disclosure, reference is now taken to FIG. 
2 wherein an exemplary embodiment of a network environment 200 is shown that is a 
more concrete subset of the generalized network environment 100 illustrated in FIG. 1. 
As depicted, UE device 102 is operably disposed for discovering a set of PLMNs that 

30 allow access via conventional RAN infrastructure in addition to having connectivity with 
one or more GANs accessible to UE device 102. By way of example, GAN-1 202-1 
through GAN-N 202 -N, which may be generalized for purposes of the present patent 
disclosure to also include any type of WLAN and/or I-WLAN arrangements (known or 
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heretofore unknown), are operable to be discovered by UE device. A GAN may support 
connectivity to one or more PLMNs, or none at all, which can include VPLMNs 204-1 
through 204-M as well as HPLMNs (e.g., HPLMN 206) with respect to UE device 102. 
Where GAN-PLMN connectivity is supported, which PLMNs behind a particular GAN 
5 are visible to UE device 102 may depend on a number of commercial factors, e.g., 
contractual arrangements between GAN operators and PLMN operators. As illustrated, 
GAN-1 202-1 supports connectivity to VPLMN-1 204-1 and VPLMN-2204-2. Likewise, 
GAN-2 202-1 supports connectivity to VPLMN-M 204-M as well as to HPLMN 206. On 
the other hand, GAN-N 202-N has no connectivity to the wide area PLMNs. 

10 As is well known, each of the wide area cellular PLMNs may be arranged as a 

number of cells, with each cell having sectors (e.g., typically three 120-degree sectors per 
base station (BS) or cell). Each cell may be provided with a cell identity, which can vary 
depending on the underlying WACN technology. For example, in GSM networks, each 
individual cell is provided with a Cell Global Identification (CGI) parameter to identify 

15 them. A group of cells is commonly designated as a Location Area (LA) and may be 
identified by an LA Identifier (LAI). Further, at the macro level, the PLMNs may be 
identified in accordance with the underlying technology. For instance, GSM-based 
PLMNs may be identified by an identifier comprised of a Mobile Country Code (MCC) 
and Mobile Network Code (MNC). Analogously, the CDMA/TDMA-based PLMNs may 

20 be identified by a System Identification (SID) parameter. Regardless of the cellular 
infrastructure, all cells broadcast the macro level PLMN identifiers such that a wireless 
device (e.g., UE device 102) wishing to obtain service can identify the wireless network. 

FIG. 3 depicts a functional block diagram of an exemplary network system 300 
where a wide area cellular PLMN 306 is accessible to UE device 102 through a GAN 302 

25 and associated controller (GANC) 304. Essentially, in the embodiment shown, GAN 302 
is operable as a broadband IP -based access network providing access to the well known 
A/Gb interfaces of PLMN 306, wherein GANC 300 is a network node coupled to GAN 
302 via a Up reference point interface 303. As provided in applicable 3 GPP specification 
documents, the Up reference point 303 defines the interface between GANC 304 and UE 

30 device 102. Where the GAN is operable to co-exist with the GSM/EDGE RAN (GERAN) 
infrastructure, it interconnects to the core PLMN via the same A/Gb interfaces used by a 
standard GERAN Base Station Subsystem (BSS) network element. Accordingly, the 
functionality of GANC 304 includes necessary protocol interworking so as to emulate the 
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functionality of the GERAN BSS (not shown in this FIGURE). The A-interface 305 
defines the interface for GSM-based circuit-switched (CS) services and is disposed 
between GANC 304 and an MSC 308 of PLMN 306. The Gb-interface 307 defines the 
interface for GPRS-based packet-switched (PS) services and is disposed between GANC 
304 and an SGSN 310 of PLMN 306. A Security Gateway (SGW) 311 may also be 
included in GANC 304 that is interfaced via a Wm reference point 309 (as defined by 
3 GPP TS 23.234) with an Authentication, Authorization and Accounting (AAA) 
proxy/server node 312 disposed in PLMN 306, wherein an HLR 316 is operably coupled 
to AAA node 312. Those skilled in the art will recognize that similar infrastructure may 
be deployed in a UMA-based implementation wherein a UMA network controller or UNC 
is operable in generally in the same way as GANC 304. 

In operation, GANC 304 appears to the core PLMN 306 as a GERAN BSS 
network element by mimicking the role of the Base Station Controller (BSC) in the 
GERAN architecture as seen from the perspective of the A/Gb interfaces. Accordingly, 
PLMN 306 to which GANC 304 is connected is unaware of the underlying access 
mechanism being supported by GANC, which is different from the radio access supported 
by the BSC. As alluded to before, GAN 302 disposed between generic access (GA)- 
enabled UE device 102 and GANC 304 may be effectuated by a suitable broadband IP 
network. The overall functionality provided by GANC 304 includes the following: 

User plane CS services that involve interworking CS bearers over Up 
interface to CS bearers over A-interface, including appropriate transcoding 
of voice to/from UE and PCM voice from/to the MSC. 
User plane PS services that involve interworking data transport channels 
over Up interface to packet flows over Gb interface. 
Control plane functionality including; (i) SGW for the set-up of secure 
tunnel with UE for mutual authentication, encryption and data integrity; (ii) 
registration for GAN service access and providing system information; (iii) 
set-up of GAN bearer paths for CS and PS services (e.g., establishment, 
management, and teardown of signaling and user plane bearers between UE 
the GANC); and (iv) GAN functional equivalents to GSM Radio Resource 
(RR) management and GPRS Radio Link Control (RLC) such as for paging 
and handovers. 
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FIG. 4A depicts an exemplary embodiment of a protocol stack 400A operable with 
the CS domain signaling plane associated with the network system 300 shown in FIG. 3. 
Likewise, FIG. 4B depicts an exemplary embodiment of a protocol stack 400B operable 
with the PS domain signaling plane associated with network system 300. Additional 
5 details regarding generic access to the A/Gb interfaces and associated architecture may be 
found in the applicable 3GPP specifications identified in the U.S. provisional patent 
applications that have been referenced and incorporated hereinabove. Furthermore, to be 
consistent with the broad generalization of the teachings of the present patent disclosure, 
an "access network server" may comprehend a network node or element operable to 

10 interface between the core PLMN and the UE as set forth above, which may include a 
GANC or a UNC as a specific implementation. 

It should be apparent to those skilled in the art that given the mosaic of various 
GANs/WLANs and PLMNs provided within a generalized network environment such as 
the network environments described hereinabove with respect to FIGS. 1 and 2, a number 

15 of GAN/GANC configurations are possible from the perspective of providing access 
between a UE device and the available WACNs (i.e., PLMNs). FIG. 5A depicts a network 
arrangement 500A where a single access network (AN) 502 is operable to connect to a 
plurality of PLMNs 504-1 through 504-K according to one embodiment, wherein each 
PLMN is served by a corresponding GANC. By way of illustration, AN 502 may be 

20 generalized as a GAN which can be a WLAN operable with the GANC protocols 
described above, wherein a plurality of Up interfaces 503-1 through 503-K are supported 
for coupling to the GANCs. Reference numerals 506-1 through 506-K refer to a plurality 
of separate GANC nodes, each for interfacing with a particular PLMN associated 
therewith, wherein MSCs 508-1 through 508-K and SGSNs 510-1 through 510-K are 

25 illustrative of respective PLMN's infrastructure. One skilled in the art should recognize 
that although each PLMN is provided with a SGSN node, it is not a requirement for 
purposes of the present disclosure, and PLMNs 504-1 through 504-K may be implemented 
in accordance with different wide area cellular technologies, protocols and standards. 

Referring now to FIG. 5B, depicted therein is an alternative network arrangement 

30 500B where AN 502 (GAN or Wireless LAN) is operable to connect to the plurality of 
PLMNs 504-1 through 504-K via a single physical GANC 550 that supports a plurality of 
virtual GANC partitions 552-1 through 552-K. Each virtual GANC (VGANC) is 
independently operable to provide the requisite A/Gb interfacing functionality with respect 
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to a corresponding PLMN. Accordingly, there is one logical GANC per PLMN that it 
connects to. Such a deployment may be used where the PLMNs supporting the WLAN 
connectivity do not see the need to own and operate their own GANC. 

Based on the foregoing discussion, it should be appreciated that the GAN 
5 architecture provides a generalized framework for interworking WLANs with 3GPP- 
compliant WACNs by utilizing existing protocols, e.g., GPRS, whereby little or no 
adaptation or standardization work is required to be performed in the core. This allows for 
services to be handed over from a GAN/WLAN to a 3GPP-compliant WACN and vice 
versa, keeping the signaling and user plane traffic intact. However, as CS-switched 

10 protocols and GPRS protocols (Logical Link Control or LLC and Sub-Network Dependent 
Convergence Protocol or SNDCP) are used, the GAN/WLAN that is chosen must be able 
to reach an MSC/SGSN that is in the same PLMN as the MSC/SGSN used to terminate 
the GAN/WLAN traffic. To further complicate matters, a GAN/WLAN could connect to 
many PLMNs each having a separate, independently discoverable GANC node as 

15 described hereinabove. When a user encounters such a GAN/WLAN environment, there 
is currently no standardized procedure to define the selection of a particular GANC. As a 
consequence, a number of potential issues arise wherein the overall user experience as 
well as call handover behavior may be negatively impacted. For instance, if a GA- 
compliant UE device that operates in dual mode (i.e., two different technologies, each 

20 preferably in a separate band, for example) discovers a macro PLMN or WACN and 
subsequently chooses a GANC that belongs to a different WACN, handover between the 
AN and WACN spaces would not work. Such issues may also arise in network 
arrangements where a single GANC is partitioned to support a number of independently 
discoverable VGANC partitions. 

25 Further, because of various levels of technology penetration and deployment in 

different regions and countries, additional complexities can arise where the AN and 
WACN spaces are to be interfaced using the GAN/WLAN approach. For example, a GA- 
compliant UE device may find itself in an area where there is no WACN coverage but 
there is WLAN coverage. If one or more WLANs are based on the I-WLAN approach 

30 rather than the GAN architecture, it is preferable that the UE differentiate between GAN 
and I-WLAN due to the differences in various control processes, e.g., registration, de- 
registration, etc., in addition to whatever service differences that may exist between them. 
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For purposes of highlighting the scope of the present patent disclosure, some of the user 
experience-related issues are set forth below. 

The UE is not currently registered on a WACN. Here the UE cannot check 
the cellular band signals to determine the country it is in (i.e., MCC is 
5 unknown) to select the best or optimal provider. Although HPLMN is 

usually selected first, VPLMN preference may depend on location (e.g., 
country). In this situation, the UE may not know which VPLMN it prefers 
to connect to when it is examining the available GAN/WLANs. 
The operator's "Preferred PLMN" list on the Subscriber Identity Module 
1 0 (SIM) or Removable user Identity Module (RUIM) associated with the user 

does not take into account the UE's need for PS data services (e.g., GPRS 
capability) or other services such as Unlicensed Mobile Access (UMA) 
services. Such a situation may arise where the PLMN list is based only on 
CS voice roaming agreements and, as a result, the user may not be able to 
15 use email and other data services. One skilled in the art will note that such 

an issue can arise whether or not GAN or I-WLAN is used. 
- Some or all of the operator-controlled lists for PLMNs may not be up-to- 
date, or particular entries for the country the UE is operating in may not be 
current. 

20 - Because it takes up capacity to update lists over the cellular band, the 

HPLMN may wish to update lists during off-hours or when the UE is 
connected over I-WLAN or GAN. 

When there are no WACN signals to allow the UE to determine the MCC, 
the availability of AGPS (Assisted Global Positioning System) in the UE, 
25 or a (manual) user input, as well as recent (i.e., time-stamped) information 

on WACN MCC may be helpfol. 

The case of operation close to country border(s) may result in the UE 
obtaining signals from more than one MCC, enabling user choice or "least 
cost" choice. 

30 Those skilled in the art should recognize that the list set forth above is purely 

illustrative rather than limiting. It is envisaged that upon reference hereto various related 
problems may become apparent with respect to user experience and call behavior in the 
context of interfacing between GAN/WLAN and PLMN spaces. 

11 
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For purposes of the present disclosure, the GA-capable UE may operate in either 
Automatic or Manual mode with certain differences in network discovery and selection 
procedures, although the particular features and capabilities of the two may vary 
depending on the applicable specification(s) as well as any modifications and changes that 
5 may be made to them. In general, the Manual mode allows the user to do more detailed 
selection/filtering of the available PLMNs, the bearer(s) to be used, and potentially even of 
the method to be used when using WLAN or other unlicensed radio technology (i.e., I- 
WLAN, GAN, or just a connection through the WLAN to the PLMN). Additional details 
regarding network discovery and selection may be found in one or more of the above- 

1 0 referenced U.S. provisional patent application(s) and nonprovisional patent application(s). 

Referring now to FIG. 6, shown therein is a flowchart of a generalized network 
discovery and selection scheme according to one embodiment wherein a UE device is 
disposed in a network environment comprising a GAN/WLAN space as well as a WACN 
space. As illustrated, the flowchart of FIG. 6 captures a methodology where the UE 

15 device gathers appropriate network information upon power-up and initial discovery (as 
per applicable 3GPP-compliant procedures), which is then transmitted to a network node 
for determining a more optimal network arrangement (i.e., appropriate GANOPLMN 
combination), preferably in view of the UE device's service requirements that may also be 
advertised to the network node. Accordingly, by effectuating appropriate resolution of 

20 UE-discovered network information and its service requirements, the network node is 
amenable to provide suitable instructions to the UE device for obtaining better service 
instantiation, which may include redirection to more suitable networks, location-based 
filtering, and the like. 

Continuing to refer to FIG. 6, at block 602, the UE device gathers network 

25 information via scanning relative to one or more WACN technologies, bands, and 
frequencies. Additionally or alternatively, the UE device is also adapted to gather network 
information via scanning relative to one or more GAN/WLAN technologies, bands, and 
frequencies (block 604). Thereafter, the UE device transmits the gathered network 
information as well as service/feature requirements (e.g., voice-only services, data-only 

30 services, voice-and-data services, GAN services, handover services, UMA services 
capability, calling plans associated with the UE device, and/or location area information 
associated with the UE device, et cetera) to a network node (block 606). In one 
embodiment, the gathered network information may comprise at least one of cell identity 



WO 2006/056071 



PCT/CA2005/001797 



information of a WACN on which the UE device is registered (i.e., CGI information of a 
registered GSM/GERAN), CGI/cell ID information relating to other available wide area 
cellular networks, cause values of any prior registration failures, Broadcast Control 
Channel (BCCH) information of at least one available wide area cellular network, and 
5 Packet Control Channel (PCCH) information of at least one available wide area cellular 
network. As alluded to hereinabove, in one embodiment, WACNs may be identified by 
their {MCC,MNC} combinations. Also, additional features such as identifying whether a 
particular WACN is data-capable (e.g., GPRS-capable) may also be provided. To the 
extent the UE device is adapted to operate based on various network lists, stored or 

10 otherwise, additional selection criteria and filters such as Forbidden GAN/PLMN lists, 
Priority GAN/PLMN lists (which may be stored, for example, in a Subscriber Identity 
Module (SIM) or Removable user Identity Module (RUIM), or in a device memory) and 
the like, may also be provided to the network node. In a further implementation, the UE 
could also list PLMNs that only provide WACN and/or WAN coverage. 

15 It should be realized that scanning operations set forth above may be performed via 

active scanning or passive scanning methods. Also, there may be more than one band 
operable with GANs and/or with PLMNs. In one instance, a frequency band may be 
selected from the group comprising 450MHz, 850MHz, 900MHz, 1800MHz, 1700 MHz, 
1900MHz, 2100MHz, 2700MHz, or other frequencies and/or any satellite bands. 

20 Upon receiving the gathered network information, service requirement information 

and/or location information from the UE device, the service logic associated with the 
network node is operable to resolve the service requirements requested by the UE device 
in view of the other bodies of the received information so that a determination may be 
made as to whether additional or alternative network arrangements are available for the 

25 UE device. In some implementations, such resolution may involve interfacing with 
additional network nodes and databases (e.g., HPLMN and/or home GANC, service 
databases, roaming databases, and so on). Thereafter, appropriate instructions may be 
provided via a suitable response message to the UE device, including pertinent 
information relative to any additional or alternative network arrangements. These 

30 operations are illustrated in block 608. Based on the instructions received from the 
network node, the UE device may then engage in obtaining appropriate service, which can 
sometimes warrant network redirection (block 610). 
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FIGS. 7 A and 7B depict flowcharts of exemplary scenarios of the network 
information collection process set forth above. Presently, applicable GAN specifications 
state that a UE device, e.g., a mobile station (MS), shall first register on a GSM/GERAN 
PLMN if found and allowed according to current 3GPP network selection procedures. 
Accordingly, the process flow exemplified in FIG. 7A begins with scanning available 
bands for GERAN PLMN networks (block 702). For each GERAN PLMN found, 
information is obtained and stored (blocks 704, 706 and 708), e.g., CGI information, 
BCCH and/or PCCH information, etc. The UE device then selects and registers on a 
GERAN PLMN (block 710) according to 3 GPP specifications, which may be mediated by 
the UE device's network lists, preferences, and other filters. If the registration with a 
particular PLMN fails, the reason for failure is stored as a cause value (blocks 712 and 
714). Once the reason for failure is stored, the registration process may repeat with 
respect to the additional PLMNs discovered according to 3 GPP specifications (block 716). 
On the other hand, if the PLMN registration is successful or if registration with no PLMN 
has been successful and the UE device is allowed to operate in GAN-only mode, further 
process flow may accordingly follow (block 718). However, if the PLMN registration is 
successful but that PLMN does not support GAN connectivity, various concerns might 
arise that could negatively impact the service selection behavior of the UE device. 

With respect to operating in GAN-mode, the UE device is operable to provide a 
number of information elements to a GANC node with which it establishes initial 
connectivity. Preferably, as pointed out in the foregoing discussion, such information can 
include network information gathered via scanning in other bands or modes as well as 
service requirements. Referring to FIG. 7B in particular, upon successful registration a 
PLMN or failure to register on any PLMN (block 750), the UE device is operable to 
search for a GAN network (block 752), preferably according to applicable 3 GPP 
specifications. Once a Uniform Resource Locator (URL) or IP address of a GANC node 
has been obtained (block 754), the UE device authenticates and registers with the GANC 
using, for instance, known Generic Access - Resource Control (GA-RC) REGISTER 
REQUEST messaging (block 756). Alternatively, where a default GANC's information is 
stored in the UE device, such information may be utilized in initiating registration. 
Typically, GANC information is comprised of a GANC Security Gateway (SGW) address, 
a GANC address and a GANC TCP port number. The IP address of the SGW may be 
locally stored in the UE device, or if the device is provided with a Fully Qualified Domain 

14 
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Name (FQDN), a DNS query may be performed to obtain the IP address. In accordance 
with the discussion set forth in the foregoing sections, such a registration message to the 
GANC may include information elements pertaining to any of the following in any 
combination: 

5 - registered GERAN CGI information if available; 

if the registration is for voice and/or data; 

services and features requested by the UE device, e.g., voice-only services, 
data-only services, voice-and-data services, GAN services, multimedia 
services, value-added services, etc.; 
10 if handover is required; 

if home-country-calls-only calls are required; 

prior GERAN PLMN registration attempts and associated cause values for 
failure; 

the registration request may also include GERAN PLMN information for 
15 which registration was successful but a GANC redirect was received. Any 

VPLMN information identified therein may be marked as such (described 
in detail hereinbelow); 

CGI information for other PLMNs available; and 

BCCH / PCCH information for available PLMNs. For instance, in one 
20 implementation, BCCH/PCCH information for all available PLMNs is 

included. In other implementations, BCCH/PCCH information for a 
portion of available PLMNs may be included. 
Further, upon successful authentication and registration with the GANC, additional 
network information may be collected by the UE device (e.g., appropriate network 
25 arrangement via a suitable response message), as illustrated in block 758. 

In addition to the various information elements described above with respect to an 
exemplary registration request, other information elements pertaining to location and/or 
identification may also be included. By way of illustration, such location and 
identification information may include: 
30 A. Cellular/WACN 

L MCC 

a. Cellular MCC (e.g., GSM) 

b. Country code associated with a microcell (or even a small 

15 
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macrocell) on a vehicle (e.g., ships, planes, trains, buses, 
etc.) 

2. MNC 

3. LAI 

4. CGI, etc. 

5. Network generated information such as current cell (and sector) 

6. Geolocation based on network information, of varying degrees of 
accuracy 

7. Geolocation based on handset assisted GPS or other positioning 
system 

B. WLAN/GAN 

Service Set ID (SSID) 
Other 

C. Manual input information and other information 

1. AP building and floor and room location and similar descriptive 
information. 

2. AP information based on location information derived from dual 
mode handsets, where the location of the handset is then transferred 
to a database to provide some (perhaps gross or rough) information 
on the location of the AP. Could be geographic information or could 
indicate the LAI or CGI of cellular systems. 

3. AP information, as in (2), but derived from recent information from 
the handset, e.g., the cell and network that the handset was viewing 
a few minutes ago before the user walked into a building and lost 
coverage. The time between loss of cellular or other information 
and the connection to the access point is a means of further 
identifying the potential lack of accuracy of the information. 

4. Indication of the type of AP. 

a. small, potentially easily moved 

b. fixed in place (at least initially) 

c. mobile, as on a ship or in a plane or on a train - there may 
be specific types of country codes when the devices in part 
of a vehicle 
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5. Whether the connectivity of the AP has changed. 

6. Location (GPS or other, even manual entry) of the ship, plane or 
vehicle with an AP or microcell. 

It should be realized by those skilled in the art that the location information may be 
5 developed by one element (i.e., a UE device) and stored in another element (AP, or 
microcell or base station controller or GANC), or even in a "universal" database within a 
PLMN or operator. Further, it should be recognized that location of an AP and its relation 
to the elements of other (even competing) networks is useful for many purposes, such as 
assisting in handover (or similar) transition of the handset connectivity, which may include 
10 "roving" as defined in 3GPP documentation. By way of illustration, exemplary uses of 
location and identification information include: 

Identification of the operator and/or PLMN or otherwise defined network 
Identification of relationship with an operator or PLMN or otherwise 
defined network 
15 - Identification of location 

a. For E91 1 and public safety purposes 

b. Including passing of information to the PSAP (Public Safety 
Answer Point) 

c. For commercial purposes 

20 - Operation of a cellular network or of an unlicensed network. 

Based on the foregoing, it will be realized that the registration procedure may be 
initiated towards a default AN node (e.g., a GANC or a UNC) after a successful discovery 
procedure or after a failed registration towards a serving AN node, where no GAN PLMN 
list was provided to the UE from the default AN node. Further, the registration procedure 

25 may also be initiated towards the default AN node when no additional PLMNs can be 
selected from the GAN PLMN list received from the default AN node. Additionally, the 
registration procedure may be triggered towards the default AN node where the UE wishes 
to perform manual PLMN selection. If the UE is already successfully registered with a 
serving AN node and a manual PLMN selection is initiated, the UE first deregisters from 

30 the current serving AN node and then initiates registration towards the default AN node. 
In this embodiment, the registration request may also include an indication that a list of 
PLMN identities is requested for manual selection. 

Additional operations and/or information elements may be involved if the 
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registration processes take place after the initial network discovery and registration 
process by the UE device as set forth above. For instance, with respect to WACN space 
(e.g., GERAN), if the UE device receives a redirect message from a GANC node (which 
could be a separate message or part of a general redirect message), the UE device may 
5 deregister from the current serving GERAN VPLMN and attempt registration on the 
VPLMNs in a number of ways. By way of illustration, the VPLMNs may be provided by 
the GANC in some priority order that may be followed by the UE device. Alternatively, if 
no order has been provided, a VPLMN may be chosen from the supplied list at random. 
With respect to subsequent registrations in GAN space, if the UE device has been 

10 redirected to another VPLMN and registration with that new VPLMN is successfiil, the 
UE device may be required to re-register with the home GANC using the same GAN as 
before. Alternatively, the UE device may register with the GANC associated with the new 
VPLMN if that information has been made available by the redirecting GANC. In a still 
further variation, there may be no subsequent GANC registration pursuant to instructions 

15 from the GANC. 

Given the interfacing between the WACN and GAN spaces as described in the 
foregoing sections, selecting a proper PLMN and GANC combination that allows optimal 
service may be modulated based on a number of factors, e.g., service requirements, 
available network information, service capabilities, location information, and the like. 

20 When a serving network node (e.g., a default GANC or a provisioning GANC) receives 
appropriate information from the UE device, at least part of the service logic involves 
resolving whether a home GANC or a GANC associated with a VPLMN should provide 
service to the UE device. FIGS. 8A and 8B are two flowcharts associated with GANC 
selection and optional redirection in accordance with an embodiment of the present patent 

25 disclosure. When the serving network node receives information from a UE device (block 
802), the service logic associated with the node determines (i) if local home network calls 
are required; and/or (ii) if handover is not required and no VPLMN GANC can be used 
(block 804). If so, the network node provides instructions to the UE device to select a 
home network GANC (block 806). On the other hand, based on the received information 

30 from the UE device (block 820), the network node service logic determines (i) handover of 
services is required; and/or (ii) VPLMN dialing plan is required (block 822). In that case, 
the network node provides instructions to the UE device to select a VPLMN-associated 
GANC (block 824). 
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It should be apparent that the service logic is preferably operable to evaluate and 
resolve a number of service scenarios based on the combinations of service and feature 
requirements as well as the network information received from the UE device. Additional 
details and flowcharts regarding exemplary service scenarios that can include redirection 
5 may be found in one or more of the above-referenced U.S. provisional patent 
application(s) and nonprovisional patent application(s), which are incorporated by 
reference. 

Referring now to FIG. 9, shown therein is a functional block diagram of an 
exemplary AN server node 900, e.g., GANC/UNC node 900 according to one 

10 embodiment. Those skilled in the art should appreciate that AN server node 900 may be 
provided in any of the configurations depicted in FIGS. 5A and 5B described hereinabove. 
Regardless, AN server node 900 includes appropriate network selection logic 902 operable 
to perform one or more of the procedures set forth above with respect to resolving 
gathered network information and service/feature requirement information that is provided 

15 by a UE device. Accordingly, in one embodiment, suitable storage areas may be provided 
for storing service/feature requirements 904 as well as gathered network information 906. 
Database query logic 908 is provided to facilitate database query and interrogation of local 
and/or remote databases, e.g., DB 910-1 through DB 910-N. 

FIG. 10 depicts a block diagram of an embodiment of a UE device operable 

20 according to the teachings of the present patent disclosure. It will be recognized by those 
skilled in the art upon reference hereto that although an embodiment of UE 102 may 
comprise an arrangement similar to one shown in FIG. 10, there can be a number of 
variations and modifications, in hardware, software or firmware, with respect to the 
various modules depicted. Accordingly, the arrangement of FIG. 10 should be taken as 

25 illustrative rather than limiting with respect to the embodiments of the present patent 
disclosure. A microprocessor 1002 providing for the overall control of an embodiment of 
UE 102 is operably coupled to a communication subsystem 1004 which includes 
transmitter/receiver (transceiver) functionality for effectuating multi-mode 
communications over a plurality of bands. By way of example, a wide area wireless 

30 Tx/Rx module 1006, a GAN Tx/Rx module 1008 and an I-WLAN Tx/Rx module 1010 are 
illustrated. Although not particularly shown, each Tx/Rx module may include other 
associated components such as one or more local oscillator (LO) modules, RF switches, 
RF bandpass filters, A/D and D/A converters, processing modules such as digital signal 
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processors (DSPs), local memory, etc. As will be apparent to those skilled in the field of 
communications, the particular design of the communication subsystem 1004 may be 
dependent upon the communications networks with which the UE device is intended to 
operate. In one embodiment, the communication subsystem 1004 is operable with both 
voice and data communications. 

Microprocessor 1002 also interfaces with further device subsystems such as 
auxiliary input/output (I/O) 1018, serial port 1020, display 1022, keyboard 1024, speaker 
1026, microphone 1028, random access memory (RAM) 1030, a short-range 
communications subsystem 1032, and any other device subsystems generally labeled as 
reference numeral 1033. To control access, a SIM/RUIM interface 1034 is also provided 
in communication with the microprocessor 1002. In one implementation, SIM/RUIM 
interface 1034 is operable with a SIM/RUIM card having a number of key configurations 
1044 and other information 1046 such as identification and subscriber-related data as well 
as one or more PLMN and SSID lists and filters alluded to hereinabove. 

Operating system software and other control software may be embodied in a 
persistent storage module (i.e., non-volatile storage) such as Flash memory 1035. In one 
implementation, Flash memory 1035 may be segregated into different areas, e.g., storage 
area for computer programs 1036 as well as data storage regions such as device state 1037, 
address book 1039, other personal information manager (PIM) data 1041, and other data 
storage areas generally labeled as reference numeral 1043, wherein appropriate GANC or 
UNC information may be stored according to one implementation. Additionally, 
appropriate network discovery/selection logic 1040 may be provided as part of the 
persistent storage for executing the various procedures, correlation techniques, 
service/feature requirement selection and identification processes as well as GANC 
selection mechanisms set forth in the preceding sections. Associated therewith is a storage 
module 1038 for storing the SSID/PLMN lists, selection/scanning filters, capability 
indicators, et cetera, also alluded to hereinabove. 

Based on the foregoing, it should be clear that the UE device logic and hardware 
includes at least the following: a logic module and/or associated means for gaining IP 
connectivity with respect to a wireless access network node disposed in a network 
environment that is comprised of a wireless AN space operable to be coupled to a WACN 
space; and a logic module and/or associated means for initiating a registration request 
message towards the wireless access network node, wherein the registration request 
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message includes at least one information element pertaining to AN services required by 
the UE device. 

It is believed that the operation and construction of the embodiments of the present 
patent disclosure will be apparent from the Detailed Description set forth above. While 
the exemplary embodiments shown and described may have been characterized as being 
preferred, it should be readily understood that various changes and modifications could be 
made therein without departing from the scope of the present invention as set forth in the 
following claims. 
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CLAIMS: 

1 . A network messaging method, comprising: 

gaining Internet Protocol (IP) connectivity by a user equipment (UE) device with 
5 respect to a wireless access network node disposed in a network environment that is 
comprised of a wireless access network (AN) space operable to be coupled to a wide area 
cellular network (WACN) space; and 

initiating a registration request message by said UE device towards said wireless 
access network node, wherein said registration request message includes at least one 
10 information element pertaining to AN services required by said UE device. 

2. The network messaging method as recited in claim 1, wherein said wireless access 
network node comprises a generic access network controller (GANG). 

15 3. The network messaging method as recited in claim 2, wherein said GANC is a 
default GANC whose information is stored in said UE device. 

4. The network messaging method as recited in claim 1, wherein said wireless access 
network node comprises an Unlicensed Mobile Access (UMA) network controller (UNC). 

20 

5. The network messaging method as recited in claim 4, wherein said UNC is a 
default UNC whose information is stored in said UE device. 

6. The network messaging method as recited in claim 1, wherein said registration 
25 request message is initiated towards said wireless access network node after a successful 

discovery procedure. 

7. The network messaging method as recited in claim 1, wherein said registration 
• request message is initiated towards said wireless access network node after a failed 

30 registration with a serving access network node. 

8. A user equipment (UE) device, comprising: 

22 



WO 2006/056071 



PCT/CA2005/001797 



means for gaining Internet Protocol (IP) connectivity with respect to a wireless 
access network node disposed in a network environment that is comprised of a wireless 
access network (AN) space operable to be coupled to a wide area cellular network 
(WACN) space; and 

5 means for initiating a registration request message towards said wireless access 

network node, wherein said registration request message includes at least one information 
element pertaining to AN services required by said UE device. 

9. The UE device as recited in claim 8, wherein said wireless access network node 
1 0 comprises a generic access network controller (GANC). 

10. The UE device as recited in claim 9, wherein said GANC is a default GANC 
whose information is stored in said UE device. 

15 11. The UE device as recited in claim 8, wherein said wireless access network node 
comprises an Unlicensed Mobile Access (UMA) network controller (UNC). 

12. The UE device as recited in claim 1 1, wherein said UNC is a default UNC whose 
information is stored in said UE device. 

20 

13. The UE device as recited in claim 8, wherein said registration request message is 
initiated towards said wireless access network node after a successful discovery procedure. 

14. The UE device as recited in claim 8, wherein said registration request message is 
25 initiated towards said wireless access network node after a failed registration towards a 

serving access network node. 

15. The UE device as recited in claim 8, further includes means for storing an IP 
address in said UE device, said IP address for identifying said wireless access network 

30 node. 
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16. The UE device as recited in claim 8, further includes means for storing a Fully 
Qualified Domain Name (FQDN) in said UE device, said FQDN for facilitating a Domain 
Name Query (DNS) with respect to an IP address of said wireless access network node. 

5 17. A network system, comprising: 

a wireless access network node disposed in a network environment that is 
comprised of a wireless access network (AN) space operable to be coupled to a wide area 
cellular network (WACN) space, said wireless access network node for facilitating 
wireless access services with respect to a Public Land Mobile Network (PLMN) of said 
10 WACN space; 

a user equipment (UE) device including means for gaining Internet Protocol (IP) 
connectivity with said wireless access network node; and 

means associated with said UE device for initiating a registration request message 
towards said wireless access network node, wherein said registration request message 
15 includes at least one information element pertaining to wireless access services required 
by said UE device. 

18. The network system as recited in claim 17, wherein said wireless access network 
node comprises a generic access network controller (GANC). 

20 

19. The network system as recited in claim 18, wherein said GANC is a default GANC 
whose information is stored in said UE device. 

20. The network system as recited in claim 17, wherein said wireless access network 
25 node comprises an Unlicensed Mobile Access (UMA) network controller (UNC). 

21. The network system as recited in claim 20, wherein said UNC is a default UNC 
whose information is stored in said UE device. 

30 22. The network system as recited in claim 17, wherein said registration request 
message is initiated towards said wireless access network node after a successful 
discovery procedure. 
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23. The network system as recited in claim 17, wherein said registration request 
message is initiated towards said wireless access network node after a failed registration 
towards a serving access network node. 

24. The network system as recited in claim 17, wherein said means for gaining IP 
connectivity is operable responsive to an IP address stored in said UE device, said IP 
address for identifying said wireless access network node. 

25. The network system as recited in claim 17, wherein said means for gaining IP 
connectivity is operable responsive to a Fully Qualified Domain Name (FQDN) stored in 
said UE device, said FQDN for facilitating a Domain Name Query (DNS) with respect to 
an IP address of said wireless access network node. 
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UE gathers available network information via scanning 
relative to WACN technologies 



UE gathers available network information via scanning 
relative to GAN/WLAN technologies 



UE transmits gathered information and service 
requirements to a network node 



Network node resolves UEs service requirements in view of 
received gathered information and transmits appropriate 
instructions to UE 



Based on the instructions received from the network node, 
UE engages in obtaining appropriate service 



602 



604 



606 



608 



610 



FIG. 6 
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Scan bands for GERAN PLMNs 



For each GERAN PLMN found 
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Successful registration or failure to register on any PLMN 






Search for a GAN 






Obtain IP address or URL of GANC 






Authenticate and 


agister with GANC 






Determine and collect information 
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Network node receives informotion from UE device ~T — 802 



Network node logic determines resolution of service requirements: 

(i) if local home network calls are required; and/or 
(ii) if handover is not required and no VPLMN GANC can be used 



— 804 



Network node provides instructions to UE device 
to select home network GANC 

FIG. 8A 



— 806 



Network node receives information from UE device 



— 820 



Network node logic determines resolution of service requirements: 

(i) if handover of services is required; and/or 
(ii) if VPLMN dialing plan is required 



— 822 



Network node provides instructions to UE device 

to select a GANC in VPLMN ~— 824 



FIG. 8B 
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